Use system properties to enable and customize Zero Trust Access to meet your security requirements.

Properties

Zero Trust Access Properties

Table 1. Zero Trust Access system properties
PropertyDescription
Enable zero trust session access Option that enables administrators to use the zero trust session access feature. By default the value is false.
Enable debug logging for zero trust session access Option to enable debug logging for the zero trust session access.
Preference to remove/limit roles in case of conflict. Whenever a common role is part of both remove and limit role(s) set, the precedence is decided based on this property. Remove Roles or Limit Roles
The number of days after which session access audit data will be deleted. The default value is 30 days and the maximum is 180 days. By default, it’s 30 days.
Information to be displayed when some privileges have been removed from the session for a user. Description that you want to display to your users regarding limiting or removal of privileges. Sample Description:

Based on security policies defined by the administrator, some of your roles have been removed from this session. Please get in touch with your administrator for more information.